Reporting API – Phriendly Phishing

This new feature allows Phriendly Phishing Company Admins to pull data from Phriendly Phishing platform for reporting purposes. Our API is able to send data from the Click Report and Training Results Report.

The API Technical Documentation is accessible from within the Phriendly Phishing platform or via this link - https://api.phriendlyphishing.com/v0.1/docs/.

This article includes:

How to get started with Reporting API
Click Report data retrieved via API
Training Results data retrieved via API

How to get started with Reporting API

Go to Settings > Reporting API
Click Access Credentials

Things to Note:
- - - - Credentials are not stored; Admins must copy and save it.
        
        API documentation is available under API Settings
        
        For lost credentials, click Access Credentials, as the application is already available it sends back the credentials to Phriendly Phishing platform.
        
        If Reporting API is disabled, the application is deleted after 28 days and the Reporting API tab under settings is no longer visible.
Once Admins has the Credentials, this can now be used to get the access token, prior to retrieving any data from the platform. Note: Access tokens expires in 12 hours

Click Report data retrieved via API

This report populates data of current zone by default and can retrieve data from its child zones if filtering with Data: Include Data From Sub Zones.

Each data includes information of Learner, Zone, Campaigns, Phishes and Clicks.

Learner’s information: Email, Segment, learner synced attributes' value
Zone information: Zone Name, synced attributes
Campaigns: Campaign (Phishing start-end)
Phishes: Phishing Email (Email Template subject), Attachment (Attachment name), Credential Capture Link (has Credential Capture Link or not), QR Code (code clicked or not)
Clicks: Time Stamp (clicked at), IP Address, User Agent, Action (type of click), Excluded (is Excluded or not)

Refer below for the fields under Click Table:

Field	Description	Notes
id	Click ID	The click can be clicked, opened, opened attachment, submitted credential or QR code.
phish_id	Phish ID	Phish represents an email that was sent to the learner. It can either be phishing or training email.
student_id	Learner ID = recipient of the phish	Click table saves the learner id, but does not include the email, segment and synced attribute values of the learner, Please refer to related tables to get those data: refer to `students` table to get learner's email refer to `student_groups` and `groups` table to get segments' name refer to `student_attribute_vales` table to get the student synced attributes' value.
campaign_id	Block ID = learner joined date and when the phish is setup	The block can be Baseline, Campaign, Spear or Training.
email_template_id	Email Template ID	Click table only saves the email template id, but does not include the subject of template, Refer to to `email_templates` table to get template’s subject.
request_details	request details of the click
created_at	date the click is created
updated_at	date the click is updated
category	Type of block Baseline Campaign Spear Phishing Training
is_excluded	Indicates whether the click is excluded by IP exclusion setting. There are 2 values: 0 = IP from the click is not excluded 1 = IP from the click is excluded
action_type	Type of action on an email. There are 4 values: 1 means ‘click’ action 2 means ‘open email’ action 3 means ‘open attachment’ action 4 means ‘submit credential capture’ action
cell_id	Zone ID	Click table saves the zone id, but does not include the name of zone. Please refer to `cells` table to get zone’s name.
email_client	Email client
email_client_version	Email client version
deleted_at	Date the click is deleted

Training Results data retrieved via API

This report populates data of current zone by default and can retrieve data from its child zones if filtering with Data: Include Data From Sub Zones.

Each data includes information of Learner, Zone, Course, Training result.

Learner’s information: Email, Name, Segment, learner’s synced attributes
Zone information: Zone Name
Course: course name (Result)
Training result: training result (Result), First Completion Date, Current Score

Refer below for the fields under Training Results table:

Field	Description	Notes
id	Training result ID
student_id	Learner ID	Training Results table saves the learner id, but does not include the email, segment and synced attribute values of learner. Refer to below related table to get the data: `students` table to get learner's email `student_groups` and `groups` table to get segments' name `student_attribute_vales` table to get the student synced attributes' value.
course_id	Course ID	`training_results` table only save the course id, not including the course name, we need to refer to `courses` table to get course name
best_score	Best score that the learner obtained on a course.
average_score	Average of all scores that the learner obtained on a course.
lowest_score	Lowest score that the learner obtained on a course.
current_score	Current score that the learner obtained on a course.
training_status	Training status has 4 values: 1= failed 2 = incomplete 3 = not started 4 = passed
course_status	Course status has 2 values: 1 = completed 2 = incomplete
created_at	Date the training result record is created.
updated_at	Date the training result record is updated.
deleted_at	Date the training result record is deleted.
first_completion_date	First date learner passed the course.

If you have specific requirements and any additional questions, please reach out to support@phriendlyphishing.com.

Related articles